$ rpki-client -vvf repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft File: C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft (raw, json) Hash identifier: bEodiPYBZOZ01wesYjvhhyzcqxwffwEb280KzDgD8NY= Subject key identifier: 80:2D:B2:49:65:68:14:9E:23:C4:EF:2B:5F:3D:AC:D4:E1:78:B4:C4 Authority key identifier: C4:FC:DC:42:4C:5B:4B:2A:56:3F:0D:07:25:73:A5:49:2A:CF:8E:36 Certificate issuer: /CN=C4FCDC424C5B4B2A563F0D072573A5492ACF8E36 Certificate serial: 77060E601A3A701E1CBE0A0448FEEC389DC55571 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft Manifest number: D8 Signing time: Sat 06 Sep 2025 20:51:53 +0000 Manifest this update: Sat 06 Sep 2025 20:46:53 +0000 Manifest next update: Wed 10 Sep 2025 04:28:53 +0000 Files and hashes: 1: 3135372e36362e33382e302f32342d3234203d3e203435333035.roa (hash: cD0fi1g8RJKzuqT2bKPT18EYQnEf1eQo9O4WH9FMt7c=) 2: 3135372e36362e33382e302f32332d3234203d3e203633383635.roa (hash: ul03DJPa84uV+wn7V8w/eIH5fK3BBIC1WxDMCBsM/QQ=) 3: C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl (hash: n1TXiT0nvT2NCGmu7ero3wI7+cKHQV/bXjusrm66D5I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 04:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:06:0e:60:1a:3a:70:1e:1c:be:0a:04:48:fe:ec:38:9d:c5:55:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4FCDC424C5B4B2A563F0D072573A5492ACF8E36 Validity Not Before: Sep 6 20:46:53 2025 GMT Not After : Sep 10 04:28:53 2025 GMT Subject: CN=802DB2496568149E23C4EF2B5F3DACD4E178B4C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:32:74:15:cf:1c:6f:50:e9:d6:41:c9:02:ef: ed:41:5f:d2:d6:b2:c8:f3:2c:8a:9f:c9:b1:61:79: 64:e2:92:a6:0c:51:44:55:0e:0b:6e:28:e4:bb:26: 22:ca:79:80:2a:6e:9f:93:26:e1:56:af:8a:f3:41: 8b:16:dc:f3:01:d3:bd:9c:1f:b8:42:46:c6:e5:a2: 67:1b:40:79:82:63:93:bb:49:5c:5d:10:bf:27:3a: 59:39:d7:65:99:2c:c9:ee:c0:73:56:1e:d1:33:23: 1b:42:d0:c4:85:71:a6:14:17:a7:0f:a8:26:39:fe: 4b:36:ef:e6:60:e3:c9:da:ed:cd:5a:65:9d:cd:89: 76:bc:e9:c9:09:9f:8e:62:7c:ad:7e:5e:5c:40:4f: cf:54:e3:ec:a3:44:fa:5f:67:7a:3b:2a:a5:8c:c0: ab:15:e3:78:c8:17:1f:99:c2:dd:87:67:5d:73:77: 22:82:10:f6:80:92:e6:9b:79:cc:b2:9f:ec:71:67: 7d:96:fd:59:aa:e5:fc:94:11:5e:d0:ce:a7:d8:e8: 46:c4:e3:e7:af:0b:47:88:32:ad:b2:44:37:7f:fb: 21:3d:ac:82:18:7f:cb:05:bc:e0:ac:64:da:e0:f1: cc:fa:c8:dc:7e:b6:a5:f6:22:bd:16:c2:20:2e:d0: 17:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:2D:B2:49:65:68:14:9E:23:C4:EF:2B:5F:3D:AC:D4:E1:78:B4:C4 X509v3 Authority Key Identifier: keyid:C4:FC:DC:42:4C:5B:4B:2A:56:3F:0D:07:25:73:A5:49:2A:CF:8E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:84:61:ad:bf:42:27:c6:a0:77:07:c5:6a:63:dc:1e:32:df: 97:a8:78:e1:01:c0:8b:48:aa:d8:d7:a5:52:01:d4:34:e2:2d: eb:76:7a:55:70:47:e3:e0:63:b9:58:cf:9c:40:b2:7e:e7:58: f3:6e:30:77:e0:6c:da:b7:46:aa:5f:92:82:b5:1a:7d:bb:ed: c5:b4:68:d1:64:e2:dd:5a:8f:a2:63:8f:c5:a0:2b:3d:79:6c: d8:34:51:a9:3e:db:96:0b:d6:2e:64:ec:cb:77:59:f6:c2:ef: 87:d2:85:6f:8b:64:15:cb:f4:fb:ed:ce:be:87:cc:8e:94:73: 19:b9:36:a4:4e:23:63:c2:4a:83:f0:96:8d:96:21:bd:43:c2: b1:4e:56:0b:d3:73:86:4b:f5:9f:ab:d7:5c:7e:a1:3d:68:53: ad:86:7d:5b:ca:65:37:9b:a5:98:08:07:e6:fb:ce:5f:e1:ec: 3a:1a:ad:d3:47:e5:15:c6:e7:a3:a0:f7:b7:83:e1:9e:d4:16: 2c:09:06:49:12:40:67:2e:d8:b6:db:52:c2:48:71:61:01:82: a6:fe:5d:51:de:e1:6a:9d:e5:1b:a4:5e:1c:10:c4:b8:1b:1a: 6a:90:fd:c7:c0:96:f4:27:bd:b2:ab:4e:6a:0e:30:d2:f3:f6: 0f:4d:76:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdwYOYBo6cB4cvgoESP7sOJ3FVXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRGQ0RDNDI0QzVCNEIyQTU2M0YwRDA3MjU3M0E1NDky QUNGOEUzNjAeFw0yNTA5MDYyMDQ2NTNaFw0yNTA5MTAwNDI4NTNaMDMxMTAvBgNV BAMTKDgwMkRCMjQ5NjU2ODE0OUUyM0M0RUYyQjVGM0RBQ0Q0RTE3OEI0QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLMnQVzxxvUOnWQckC7+1BX9LW ssjzLIqfybFheWTikqYMUURVDgtuKOS7JiLKeYAqbp+TJuFWr4rzQYsW3PMB072c H7hCRsblomcbQHmCY5O7SVxdEL8nOlk512WZLMnuwHNWHtEzIxtC0MSFcaYUF6cP qCY5/ks27+Zg48na7c1aZZ3NiXa86ckJn45ifK1+XlxAT89U4+yjRPpfZ3o7KqWM wKsV43jIFx+Zwt2HZ11zdyKCEPaAkuabecyyn+xxZ32W/Vmq5fyUEV7QzqfY6EbE 4+evC0eIMq2yRDd/+yE9rIIYf8sFvOCsZNrg8cz6yNx+tqX2Ir0WwiAu0Bf3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgC2ySWVoFJ4jxO8rXz2s1OF4tMQwHwYDVR0j BBgwFoAUxPzcQkxbSypWPw0HJXOlSSrPjjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWIyNjdhNC01MDMwLTRhNGYtYmI4Ni03MWZkMjMwZjUzZDEvMC9DNEZDREM0MjRD NUI0QjJBNTYzRjBEMDcyNTczQTU0OTJBQ0Y4RTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzRGQ0RDNDI0QzVCNEIyQTU2M0YwRDA3MjU3M0E1NDkyQUNG OEUzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFiMjY3YTQtNTAzMC00YTRmLWJi ODYtNzFmZDIzMGY1M2QxLzAvQzRGQ0RDNDI0QzVCNEIyQTU2M0YwRDA3MjU3M0E1 NDkyQUNGOEUzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHeEYa2/QifGoHcHxWpj3B4y35eoeOEBwItI qtjXpVIB1DTiLet2elVwR+PgY7lYz5xAsn7nWPNuMHfgbNq3RqpfkoK1Gn277cW0 aNFk4t1aj6Jjj8WgKz15bNg0Uak+25YL1i5k7Mt3WfbC74fShW+LZBXL9Pvtzr6H zI6Ucxm5NqROI2PCSoPwlo2WIb1DwrFOVgvTc4ZL9Z+r11x+oT1oU62GfVvKZTeb pZgIB+b7zl/h7DoardNH5RXG56Og97eD4Z7UFiwJBkkSQGcu2LbbUsJIcWEBgqb+ XVHe4Wqd5RukXhwQxLgbGmqQ/cfAlvQnvbKrTmoOMNLz9g9NdtM= -----END CERTIFICATE-----Generated at Mon Sep 8 05:15:05 2025 by rpki-client